1511 matches found
Cybercriminal Enterprise 'Ringleaders' Stole $55M Via COVID-19 Fraud, Romance Scams
Click to Register U.S. law enforcement arrested six “ringleaders” of a Ghana-based cybercriminal enterprise, who had allegedly launched a slew of money-stealing scams dating back to 2013 that included romance scams, business email compromise attacks and fraud. Seized in the arrests were a slew of...
RainbowFish PacsOne Server SQL Injection Vulnerability
RainbowFish PacsOne Server is an image archiving and communication system server from RainbowFish. The system is used to save incoming images, and a SQL injection vulnerability exists in RainbowFish PacsOne Server that could be exploited by attackers to execute illegal SQL commands...
Clearview Facial-Recognition Technology Ruled Illegal in Canada
Canadian authorities have found that the collection of facial-recognition data by Clearview AI is illegal because it violates federal and provincial privacy laws, representing a win for individuals’ privacy and potentially setting a precedent for other legal challenges to the controversial...
Updated resteasy packages fix a security vulnerability
A flaw was found in Resteasy, where an improper input validation results in returning an illegal header that integrates into the server's response. This flaw may result in an injection, which leads to unexpected behavior when the HTTP response is constructed CVE-2020-1695...
360 F5 Input Validation Error Vulnerability
The 360 F5 is a smartphone device from the Chinese company 360. The 360F5 3.1.3.64296 and lower suffers from an Input Authentication Error vulnerability that stems from a specific illegal 802.11 Null Data Frame, which causes other wireless terminals to disconnect from the wireless connection in...
Police Arrest 21 WeLeakInfo Customers Who Bought Breached Personal Data
21 people have been arrested across the UK as part of a nationwide cyber crackdown targeting customers of WeLeakInfo.com, a now-defunct online service that had been previously selling access to data hacked from other websites. The suspects used stolen personal credentials to commit further cyber...
Weak Password Vulnerability in VMware's Centralized Switch Management Platform
Ltd. is a leading domestic network equipment and smart home product solution provider, the main products include wireless gateway, switch, foreign VPN, etc.. There is a weak password vulnerability in the centralized management platform of VMware switch, which can be exploited by an attacker to lo...
EulerOS 2.0 SP5 : nasm (EulerOS-SA-2020-2556)
According to the versions of the nasm package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - NASM nasm-2.13.03 nasm- 2.14rc15 version 2.14rc15 and earlier contains a memory corruption crashed of nasm when handling a crafted file due to...
EulerOS 2.0 SP8 : nasm (EulerOS-SA-2020-2521)
According to the versions of the nasm package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - NASM nasm-2.13.03 nasm- 2.14rc15 version 2.14rc15 and earlier contains a memory corruption crashed of nasm when handling a crafted file due to...
Buying COVID-19 vaccines from the Dark Web? No thanks!
Even though we hope that this is an unnecessary warning, we do want to put it out there. As soon as there was talk about a vaccine being available against the COVID-19 virus there were vendors on the Dark Web offering Russian and Chinese COVID-19 vaccines for sale. Now that the UK has started its...
sympa -- Unauthorised full access via SOAP API due to illegal cookie
Sympa community reports: Unauthorised full access via SOAP API due to illegal cookie...
GaussDB Kernel: Configuring the Port
To prevent unauthorized connections to the database and illegal operations on data, you need to change the default port number in time. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
openGauss: Configuring the Port
To prevent unauthorized connections to the database and illegal operations on data, you need to change the default port number in time. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
Feds Seize $1B in Bitcoin from Silk Road
The feds have seized its largest stash ever of Bitcoin, originating from the notorious Silk Road underground marketplace. The federal coffers are now $1 billion richer. Silk Road was known for the place to go to broker illegal drugs, murder-for-hire, child pornography and malware – such as passwo...
CVE-2020-6877
A ZTE product is impacted by an information leak vulnerability. An attacker could use this vulnerability to obtain the authentication password of the handheld terminal and access the device illegally for operation. This affects: ZXA10 eODN V2.3P2T1...
EulerOS 2.0 SP9 : nasm (EulerOS-SA-2020-2434)
According to the versions of the nasm package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Netwide Assembler NASM 2.14rc16 has a heap-based buffer over-read in expandmmacparams in asm/preproc.c for the special cases of the % and $ and !...
EulerOS 2.0 SP9 : nasm (EulerOS-SA-2020-2416)
According to the versions of the nasm package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Netwide Assembler NASM 2.14rc16 has a heap-based buffer over-read in expandmmacparams in asm/preproc.c for the special cases of the % and $ and !...
Huawei EulerOS: Security Advisory for libsolv (EulerOS-SA-2020-2255)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Illegal Address Access Vulnerability in Hcidump
Hcidump is a tool for capturing and analyzing hci packets and supports reading local hci traffic packets. Hcidump suffers from an illegal address access vulnerability. An attacker could exploit this vulnerability to cause the program to crash...
